BIT-nextcloud-2026-68493

vendorUSosv
view advisory published 2026-09-25Licence: per source

After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-68493US——
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan